$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9IPLIXCzdIq3guRJFkSyjLHkXD4.roa File: 9IPLIXCzdIq3guRJFkSyjLHkXD4.roa (raw, json) Hash identifier: 7bQbGhkS4JCInb8PY2J9NOizF1lvxfit6CqmPcMpD0U= Subject key identifier: F4:83:CB:21:70:B3:74:8A:B7:82:E4:49:16:44:B2:8C:B1:E4:5C:3E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ADB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9IPLIXCzdIq3guRJFkSyjLHkXD4.roa Signing time: Fri 31 Jan 2025 01:28:24 +0000 ROA not before: Fri 31 Jan 2025 01:28:24 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2779 (0xadb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:24 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=F483CB2170B3748AB782E4491644B28CB1E45C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:55:17:d6:1a:5d:53:3c:08:ed:07:61:0a: ba:99:a3:b2:ae:21:92:6c:be:f4:e9:24:37:af:cf: ed:51:f0:67:4c:5d:4c:12:a1:58:cc:e5:7f:41:61: fd:e3:36:70:64:91:cd:a9:30:cd:5c:86:85:d5:0d: b7:b8:1e:43:04:f1:c8:45:f2:bc:8b:41:47:e5:71: ee:e8:17:11:46:5c:71:f0:2c:0e:29:73:d4:73:19: 88:e2:0d:c4:ea:10:44:ca:3d:f8:f0:48:67:e8:c6: a3:44:fb:01:de:c4:16:53:4d:04:48:00:e1:d3:0e: d7:90:a5:28:7b:b4:db:10:6f:3b:2a:b9:a7:19:a3: 32:b4:ae:73:1e:36:1e:e9:cb:46:e9:d9:78:d1:05: b3:1e:1a:09:7c:58:d3:91:ff:64:3a:18:e4:3e:c1: b0:94:c4:cb:9f:8f:83:b9:4e:4c:1c:d7:c8:8f:44: 4b:23:b1:56:66:9a:72:89:27:2e:cf:ae:c5:74:b5: b6:9b:ef:7a:00:77:a4:f6:04:33:d3:0f:b0:9e:37: 19:93:38:86:de:a1:6d:42:fe:26:89:03:c5:ea:f5: 64:5a:4b:c4:46:07:e1:f4:39:4b:14:83:60:c0:de: bf:bb:b3:6c:a5:39:20:f4:40:45:91:f9:2f:bc:02: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:83:CB:21:70:B3:74:8A:B7:82:E4:49:16:44:B2:8C:B1:E4:5C:3E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9IPLIXCzdIq3guRJFkSyjLHkXD4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.9.0/24 Signature Algorithm: sha256WithRSAEncryption 63:93:5d:61:54:8c:20:78:cb:01:da:e7:88:5b:12:75:eb:c3: cc:9f:c5:39:17:96:cb:73:2c:c6:e9:40:9b:26:46:f3:fc:f1: 22:84:e0:3f:1e:a9:fe:91:37:94:85:d3:f5:a8:ab:72:fa:83: 3b:45:fb:33:f0:aa:ef:ee:8e:1b:12:77:7b:b9:3b:4b:b1:18: 84:4e:9c:b1:36:df:9f:c7:90:ca:d8:da:63:81:42:12:2f:06: 63:72:42:20:14:29:a0:99:d9:1d:1b:4b:e3:47:90:8b:8b:82: a8:ae:bf:45:96:24:f3:dd:b1:11:83:7e:b5:f2:2b:99:da:f7: 73:5e:04:c5:ab:f7:3f:79:8c:1c:0b:f5:e1:1b:95:96:84:69: ff:fe:79:aa:f5:76:74:c7:65:13:54:d1:be:4e:b8:17:38:58: d9:2f:b1:35:c3:85:95:54:15:a1:f5:c2:af:4f:87:b3:6c:05: 5a:10:29:f1:15:b3:80:ca:94:a7:b9:a6:e8:0b:56:79:db:ad: cb:81:57:52:ef:9d:68:d1:65:8b:2b:03:8a:35:39:97:33:d1: 60:af:66:aa:ef:02:bf:28:5c:65:50:15:01:a9:b7:31:36:f6: b9:ea:32:60:dd:68:ae:9b:fd:5e:b6:06:60:af:df:93:c8:df: fe:ae:20:7b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MjRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY0ODNDQjIxNzBCMzc0 OEFCNzgyRTQ0OTE2NDRCMjhDQjFFNDVDM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDinlUX1hpdUzwI7QdhCrqZo7KuIZJsvvTpJDevz+1R8GdMXUwS oVjM5X9BYf3jNnBkkc2pMM1choXVDbe4HkME8chF8ryLQUflce7oFxFGXHHwLA4p c9RzGYjiDcTqEETKPfjwSGfoxqNE+wHexBZTTQRIAOHTDteQpSh7tNsQbzsquacZ ozK0rnMeNh7py0bp2XjRBbMeGgl8WNOR/2Q6GOQ+wbCUxMufj4O5Tkwc18iPREsj sVZmmnKJJy7PrsV0tbab73oAd6T2BDPTD7CeNxmTOIbeoW1C/iaJA8Xq9WRaS8RG B+H0OUsUg2DA3r+7s2ylOSD0QEWR+S+8Aig5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9IPLIXCzdIq3guRJFkSyjLHkXD4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzlJUExJWEN6ZElxM2d1UkpGa1N5akxIa1hENC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSAkwDQYJKoZIhvcNAQELBQADggEBAGOTXWFUjCB4ywHa54hbEnXrw8yf xTkXlstzLMbpQJsmRvP88SKE4D8eqf6RN5SF0/Woq3L6gztF+zPwqu/ujhsSd3u5 O0uxGIROnLE235/HkMrY2mOBQhIvBmNyQiAUKaCZ2R0bS+NHkIuLgqiuv0WWJPPd sRGDfrXyK5na93NeBMWr9z95jBwL9eEblZaEaf/+ear1dnTHZRNU0b5OuBc4WNkv sTXDhZVUFaH1wq9Ph7NsBVoQKfEVs4DKlKe5pugLVnnbrcuBV1LvnWjRZYsrA4o1 OZcz0WCvZqrvAr8oXGVQFQGptzE29rnqMmDdaK6b/V62BmCv35PI3/6uIHs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:32:58 2025 by rpki-client